Cisco 350-201 Exam - Topic 8 Question 115 Discussion

Actual exam question for Cisco's 350-201 exam

Question #: 115
Topic #: 8

An engineer is going through vulnerability triage with company management because of a recent malware outbreak from which 21 affected assets need to be patched or remediated. Management decides not to prioritize fixing the assets and accepts the vulnerabilities. What is the next step the engineer should take?

AInvestigate the vulnerability to prevent further spread

BAcknowledge the vulnerabilities and document the risk

CApply vendor patches or available hot fixes

DIsolate the assets affected in a separate network

Show Suggested Answer

Suggested Answer: D

by Maurine at Aug 13, 2025, 11:40 PM

Limited Time Offer

25%

Off

Get Premium 350-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Yuette

4 months ago

A is a good move too, need to prevent further issues.

upvoted 0 times

...

Verda

5 months ago

I think isolating the assets (D) makes more sense.

upvoted 0 times

...

Royal

5 months ago

Surprised they’re not patching! What if it spreads?

upvoted 0 times

...

Lashanda

5 months ago

Not sure if just documenting is enough, feels risky.

upvoted 0 times

...

Lisbeth

5 months ago

Definitely B, gotta document those risks!

upvoted 0 times

...

Julio

6 months ago

Isolating the assets could be a good idea, but if management accepted the risk, maybe they just need to acknowledge it instead? I'm a bit confused.

upvoted 0 times

...

Alberta

6 months ago

I practiced a similar question where documenting risks was emphasized, so I feel like option B is the right choice here.

upvoted 0 times

...

Teri

6 months ago

I'm not entirely sure, but I remember something about investigating vulnerabilities to prevent further spread. That might be important too.

upvoted 0 times

...

Dustin

6 months ago

I think the engineer should probably document the risk after management decided not to prioritize fixing the assets. That seems like a logical next step.

upvoted 0 times

...

Lennie

6 months ago

I'm a little confused on this one. Should we be trying to fix the vulnerabilities or just accept them? I guess documenting the risk is the responsible thing to do, but I wish management was taking this more seriously.

upvoted 0 times

...

Leanna

7 months ago

Applying vendor patches or hot fixes seems like the most straightforward solution, but if management has already decided not to prioritize it, that might not be an option. Documenting the risk is probably the safest bet.

upvoted 0 times

...

Paulina

7 months ago

Hmm, this is a tricky one. I'm not sure if isolating the affected assets is the right move - that could disrupt operations. Maybe we should investigate the vulnerability first to see if we can contain the spread.

upvoted 0 times

...

Dorothy

7 months ago

I think the best approach here is to acknowledge the vulnerabilities and document the risk. That way, management is aware of the potential issues and we have a record of the decision.

upvoted 0 times

...